Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7d00d1-aa30-46c4-af57-39bf891c19be/1/qqW27Jbny2JIjtUS2vxUfj4zNGE.mft
File:                     qqW27Jbny2JIjtUS2vxUfj4zNGE.mft (raw, json)
Hash identifier:          yFypDlr6XDV4xQ6MlEfbtTbfnKDYOnhBXisHUQWepJM=
Subject key identifier:   4A:C8:A0:54:79:3A:6C:3C:3E:AF:08:E0:63:8E:0A:DF:07:61:E9:EF
Authority key identifier: AA:A5:B6:EC:96:E7:CB:62:48:8E:D5:12:DA:FC:54:7E:3E:33:34:61
Certificate issuer:       /CN=aaa5b6ec96e7cb62488ed512dafc547e3e333461
Certificate serial:       018ACC6DF33867718ABFCA59C0FC39355729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqW27Jbny2JIjtUS2vxUfj4zNGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/7d00d1-aa30-46c4-af57-39bf891c19be/1/qqW27Jbny2JIjtUS2vxUfj4zNGE.mft
Manifest number:          0F05
Signing time:             Mon 25 Sep 2023 13:01:12 +0000
Manifest this update:     Mon 25 Sep 2023 13:01:12 +0000
Manifest next update:     Tue 26 Sep 2023 13:01:12 +0000
Files and hashes:         1: qqW27Jbny2JIjtUS2vxUfj4zNGE.crl (hash: YLwbMQO2wMmjOaunEdQARZU/lvESjMv/RVn4hqYfbUU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:cc:6d:f3:38:67:71:8a:bf:ca:59:c0:fc:39:35:57:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaa5b6ec96e7cb62488ed512dafc547e3e333461
        Validity
            Not Before: Sep 25 13:01:12 2023 GMT
            Not After : Sep 26 13:01:12 2023 GMT
        Subject: CN=4ac8a054793a6c3c3eaf08e0638e0adf0761e9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:9f:43:4c:2d:ce:13:3d:1c:64:60:9f:5c:fc:
                    60:11:27:fa:32:b8:74:37:1e:db:e3:59:1f:de:86:
                    dc:d8:13:5f:78:bf:09:82:41:c2:b2:8d:4b:b0:ce:
                    22:1e:a7:1d:91:86:84:cf:d1:6a:73:af:f5:7b:a9:
                    eb:3b:ce:52:07:02:e9:d2:9a:66:21:ad:2b:60:e5:
                    5d:36:8e:c7:5a:8c:69:20:7b:4b:ef:ac:da:bf:5d:
                    84:2e:46:e9:c6:27:6a:90:17:11:9c:2d:9e:71:ae:
                    c3:cd:fc:0f:2f:bf:5b:2d:4a:90:d7:db:f0:a7:d9:
                    4e:29:cb:76:d2:33:07:a3:5f:99:86:bf:d8:de:38:
                    f5:91:27:3b:ee:38:9c:41:26:c3:09:ca:42:6a:62:
                    03:47:bf:ea:d7:35:cb:d2:b0:f6:c3:1e:19:9d:9a:
                    b2:74:9e:1f:01:70:0b:b4:89:38:fc:dd:e0:f9:ee:
                    c5:38:9a:30:46:a4:04:1b:54:6e:45:79:3c:7a:a6:
                    6a:e7:a7:7c:d1:70:ea:3e:3b:53:6e:ad:c2:f1:6f:
                    81:51:d5:14:32:c8:d8:a3:3b:93:5e:77:f6:24:8a:
                    23:33:a8:2e:62:cf:2d:6e:33:17:33:36:7b:02:a7:
                    06:d4:29:48:a1:c7:4d:0e:57:c6:85:db:76:92:e4:
                    74:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C8:A0:54:79:3A:6C:3C:3E:AF:08:E0:63:8E:0A:DF:07:61:E9:EF
            X509v3 Authority Key Identifier:
                keyid:AA:A5:B6:EC:96:E7:CB:62:48:8E:D5:12:DA:FC:54:7E:3E:33:34:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqW27Jbny2JIjtUS2vxUfj4zNGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7d00d1-aa30-46c4-af57-39bf891c19be/1/qqW27Jbny2JIjtUS2vxUfj4zNGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7d00d1-aa30-46c4-af57-39bf891c19be/1/qqW27Jbny2JIjtUS2vxUfj4zNGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:97:66:47:5c:72:06:47:f1:1f:f3:4f:94:74:03:da:71:29:
         55:7d:b2:bc:c8:b4:50:01:27:9d:79:67:93:8a:bb:94:fd:ae:
         71:f2:9d:67:f7:3a:c7:c9:a0:a4:ed:f5:bc:ba:2e:e8:8a:11:
         ff:ec:bd:59:e1:ee:90:a8:f8:67:2f:e7:9f:f5:5e:22:21:28:
         03:24:5e:06:4b:f1:c3:2a:9a:68:8f:55:eb:9d:44:7f:8b:82:
         01:75:a5:0d:7e:63:0f:21:e0:a0:a8:91:b6:7e:c7:c2:ba:56:
         12:47:0b:27:c4:ad:c7:d9:ad:1f:2c:40:73:9e:8c:27:88:ec:
         6d:a8:9a:df:6a:47:d2:23:90:e0:e4:7e:78:4e:6c:99:f0:cf:
         6e:b8:08:fa:19:6e:15:bc:97:9a:3e:f7:9c:8b:98:25:11:b8:
         60:09:12:b0:7f:7e:45:2d:68:ed:16:c2:ff:d3:b0:69:67:b5:
         97:d8:d8:5d:90:54:bf:e5:8e:e9:11:2a:e3:e6:5c:41:b5:ae:
         db:04:5d:9b:99:1b:af:f8:07:0d:9c:10:87:6f:d0:24:0b:29:
         6c:6c:d1:72:63:10:08:6b:5b:97:77:a9:26:34:02:d5:7d:1a:
         f3:b2:e2:3c:f8:76:f7:1a:cd:53:fb:38:b6:5c:2e:82:6c:35:
         f5:26:03:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:06 2025 by rpki-client